|  | 6.3 | Standard ACLs
| 6.3.3 | How to verify access lists

You use the show access-lists EXEC command to display the contents of all ACLs. In addition, you use the show access-lists EXEC command followed by the name or number of an ACL to display the contents of one ACL. The following example of a standard ACL allows access for hosts on the three specified networks: access-list 1 permit 192.5.34.0 0.0.0.255 access-list 1 permit 128.88.0.0 0.0.255.255 access-list 1 permit 36.0.0.0 0.255.255.255 !(Note:all other access implicitly denied) In the example, the wildcard bits apply to the host portions of the network addresses. Any host with a source address that does not match the ACL statements will be rejected. To specify a large number of individual addresses more easily, you can omit the wildcard if it is all zeros. Thus, the following two configuration commands have the same effect: access-list 2 permit 36.48.0.3 access-list 2 permit 36.48.0.3 0.0.0.0 The ip access-group command groups an existing ACL to an interface. Remember that only one ACL per port per protocol per direction is allowed. The format of the command is: Router(config-if)#ip access-group access-list-number {in | out}